$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/79057E1CEB1011EEB9CE4F19C4F9AE02.roa File: 79057E1CEB1011EEB9CE4F19C4F9AE02.roa (raw, json) Hash identifier: YsVfDXFIC7xnP5MntDAopQPhYtPk1ODWWS+LdtWXaNI= Subject key identifier: 3A:DD:58:11:58:D1:98:95:E2:AE:5C:97:93:A1:FA:39:DA:0C:19:93 Certificate issuer: /CN=A916E9F4/serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4 Certificate serial: 02 Authority key identifier: 22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/79057E1CEB1011EEB9CE4F19C4F9AE02.roa Signing time: Tue 26 Mar 2024 01:30:48 +0000 ROA not before: Tue 26 Mar 2024 01:30:48 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 141015 IP address blocks: 103.154.240.0/23 maxlen: 24 2407:e340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 22:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9F4/serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4 Validity Not Before: Mar 26 01:30:48 2024 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=66022548-7307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:68:16:30:e1:c9:7f:26:b6:80:18:24:45:73: 46:3d:6e:ed:3d:5f:ef:f1:02:64:dc:83:f7:07:90: 19:7e:31:fc:4e:c1:eb:79:e3:51:8b:32:44:d9:62: 4d:07:4a:d3:c9:ef:ec:2b:12:01:41:a4:db:ea:d3: d7:04:89:7c:c3:96:5c:77:74:2e:6d:35:a6:26:0a: 37:da:83:27:07:57:44:a2:92:38:a3:99:3a:87:96: 12:a3:a9:f1:a0:f9:c0:85:8c:42:02:0d:0d:f7:90: 5f:d9:ce:28:25:c6:3d:7d:bd:f2:9e:90:e1:fb:99: 69:de:11:ae:f7:92:a4:39:cc:1f:39:7f:47:88:33: 49:ad:a8:ee:80:cd:c2:d9:6c:1e:1c:97:d1:b6:b2: b1:c7:8d:5b:12:b2:80:d5:9e:e7:dc:41:f4:04:3e: ae:15:91:32:61:b4:ed:43:e3:4c:87:9e:87:b7:5e: fa:e4:c7:96:e9:99:b0:09:dc:fa:48:0a:e8:e4:26: 88:2f:fa:3f:e7:f6:69:7d:c5:a9:1d:c6:a4:44:bc: 6d:35:16:fe:7f:c7:b2:e3:48:fe:05:8f:0d:6a:c0: 77:1f:91:71:cd:e5:0e:2a:2f:82:5e:3b:02:f0:bb: 9c:2c:73:6f:4f:08:ec:3b:87:24:20:fd:27:9c:f5: 6b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DD:58:11:58:D1:98:95:E2:AE:5C:97:93:A1:FA:39:DA:0C:19:93 X509v3 Authority Key Identifier: keyid:22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/79057E1CEB1011EEB9CE4F19C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.154.240.0/23 IPv6: 2407:e340::/32 Signature Algorithm: sha256WithRSAEncryption 70:4b:51:73:d9:34:9e:0f:82:40:e5:83:f7:c9:21:64:73:5e: c1:c8:b4:77:25:4c:aa:0b:4d:e1:65:4a:14:a4:80:bb:51:5c: 9f:4f:22:98:34:11:f5:50:37:58:bc:ef:8c:98:f9:eb:fd:75: 34:be:e1:9a:c9:e1:2a:3e:f0:65:39:ed:eb:15:d4:63:59:d6: ea:c9:11:28:66:81:32:d6:f0:85:d7:03:bb:c3:60:36:52:65: 37:20:f7:7b:b6:e1:1f:0e:40:e4:a0:e7:40:08:2f:62:df:08: 9f:0f:9b:93:e3:6f:8d:c4:ff:2e:b7:60:ea:8b:68:1c:7b:6d: c0:c8:3f:d1:74:79:61:c2:c1:4b:7d:f8:12:5f:8f:1e:f3:e5: 4c:24:96:4e:0e:11:4b:bb:f4:ef:1d:a4:eb:ed:12:41:fd:43: b6:65:79:81:34:9c:9b:e0:72:37:f7:1c:77:94:5e:67:4d:47: 74:02:b2:10:1e:83:4d:2b:0c:6b:3f:60:89:e2:d2:4b:e1:34: f8:48:3c:02:09:ad:c1:17:3a:41:7d:47:f4:a2:a8:1f:f4:3f: 6e:ec:e8:9c:b1:e4:67:b0:10:37:3c:20:09:be:7a:13:72:e6: 57:bc:a3:3a:43:5c:fd:d7:15:1a:37:cc:37:c5:e8:45:7f:9b: 41:3c:84:9e -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RTlGNDExMC8GA1UEBRMoMjJCNEE5QUFBOTgyQUJDQjM5Rjk3ODk4NkJDQjY3NzBC NjAyQzFBNDAeFw0yNDAzMjYwMTMwNDhaFw0yNDEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MDIyNTQ4LTczMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8aBYw4cl/JraAGCRFc0Y9bu09X+/xAmTcg/cHkBl+MfxOwet541GLMkTZYk0H StPJ7+wrEgFBpNvq09cEiXzDllx3dC5tNaYmCjfagycHV0SikjijmTqHlhKjqfGg +cCFjEICDQ33kF/Zziglxj19vfKekOH7mWneEa73kqQ5zB85f0eIM0mtqO6AzcLZ bB4cl9G2srHHjVsSsoDVnufcQfQEPq4VkTJhtO1D40yHnoe3Xvrkx5bpmbAJ3PpI CujkJogv+j/n9ml9xakdxqREvG01Fv5/x7LjSP4Fjw1qwHcfkXHN5Q4qL4JeOwLw u5wsc29PCOw7hyQg/Sec9WvLAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUOt1YEVjR mJXirlyXk6H6OdoMGZMwHwYDVR0jBBgwFoAUIrSpqqmCq8s5+XiYa8tncLYCwaQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFOUY0LzNENkJBNTc0RjY5 NjExRUE5MzQ4NkYyNUM0RjlBRTAyL0lyU3BxcW1DcThzNS1YaVlhOHRuY0xZQ3dh US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSXJTcHFxbUNxOHM1LVhpWWE4dG5jTFlDd2FRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTlGNC8zRDZCQTU3NEY2OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi83OTA1N0UxQ0VC MTAxMUVFQjlDRTRGMTlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAWea8DANBAIAAjAHAwUAJAfjQDANBgkqhkiG9w0BAQsFAAOC AQEAcEtRc9k0ng+CQOWD98khZHNewci0dyVMqgtN4WVKFKSAu1Fcn08imDQR9VA3 WLzvjJj56/11NL7hmsnhKj7wZTnt6xXUY1nW6skRKGaBMtbwhdcDu8NgNlJlNyD3 e7bhHw5A5KDnQAgvYt8Inw+bk+NvjcT/Lrdg6otoHHttwMg/0XR5YcLBS334El+P HvPlTCSWTg4RS7v07x2k6+0SQf1DtmV5gTScm+ByN/ccd5ReZ01HdAKyEB6DTSsM az9gieLSS+E0+Eg8AgmtwRc6QX1H9KKoH/Q/buzonLHkZ7AQNzwgCb56E3LmV7yj OkNc/dcVGjfMN8XoRX+bQTyEng== -----END CERTIFICATE-----Generated at Mon May 20 23:16:44 2024 by rpki-client on console-fra.rpki-client.org